Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-07-24
Set Up Sana for Workday

Set Up Sana for Workday

You might need to take additional steps to enable this feature based on your organization's subscription service agreement. Your organization is either on the Main Service Agreement (MSA) or the Universal Main Service Agreement (UMSA). To determine your organization's subscription service agreement:
  1. Select your profile avatar on Workday Community.
  2. Select
    Profile
    .
  3. On your profile page, select your organization's name, which is beneath your name and next to your job title.
  4. View your
    Subscription Service Agreement
     value.
If the value is:
UMSA is required for non-production and production tenants for Workday-Built agents. UMSA is not required for non-production tenants for self-built agents.
For information about how using agents impacts your Flex Credits, see: Workday Flex Credits Community page.
To use this functionality, you must:
  • Sign the Universal Main Subscription Agreement (UMSA).
    When you sign the agreement, Workday provides your organization with complimentary Flex Credits that you can use towards Sana Core for Workday. Once you reach the allotted complimentary Flex Credit consumption, you must sign the Workday Flex Credits and Platform Entitlement Policy to continue to use Sana Core for Workday.
  • Purchase the Core Human Capital Management or Core Financials SKU. This only applies to Sana Core.
  • Sign the Workday Flex Credits and Platform Entitlement Policy. This only applies to Sana Enterprise.
  • Purchase the Sana Enterprise SKU. This only applies to Sana Enterprise.
Security: These domains in the System functional area:
  • Sana Agent User Provisioning
  • Sana Enterprise
  • Security Activation
  • Security Configuration
You can set up Sana for Workday to deliver an AI-native experience, enabling you to interact with Workday conversationally. To ensure security setup for Sana and the related AI agents is complete, Workday sends notifications to administrators. We notify:
  • Workday security administrators to complete the
    Set Up AI Admin Security Permissions
     task.
  • Agent System of Record administrators to configure and activate the Self-Service Agent.
  • Sana administrators to optionally configure or modify default settings in the Sana Workspace.
  • User provisioning administrators to provision employees to Sana.
  3. Configure the
    Sana Enterprise
     domain in the System functional area.
    This step is required if your organization purchased Sana Enterprise. This domain configuration determines who can use cross-system connections and Sana Enterprise features.
  4. (Optional) Access the
    Set Up Security Groups for User Provisioning
     task.
    Add rows to the grid and select the security groups you want to enable for Sana provisioning on the
    Security Groups
     prompt. You can select only these groups when you provision users to Sana Workspace.
    Security:
    Set Up: User Provisioning
     domain in the System and User Provisioning functional areas.
  5. Provision users to Sana Workspace.
    Wokday notifies the appropriate administrators to provision users to the Sana Workspace.
    1. In Workday, open the
      Action Required: Provision Users to Sana Workspace
       notification from the
      Notifications
       menu.
    2. Click the link in the notification to open the User Provisioning Workspace.
    3. On the
      Products
       page, click
      Configure
       in the
      Sana
       tile.
    4. In the
      Provision Users
       section, click
      Edit Provisioning Group
      .
    5. In the
      Using Workday Security Groups
       prompt, select one of these:
      • All
         to provision all users for Sana.
      • Individual security groups to provision.
    6. Click
      Update Provisioning Group
      .
    7. Click
      Preview and Enable Sync
      .
    8. Review the users who you want to provision, select the confirmation check box, and click
      Enable Sync
      .
    After you enable syncing, Workday automatically provisions users in the selected security groups for access to the Sana Workspace.
  6. Configure access to the Sana Workspace from Workday.
    Enable the
    Sana
     card on the Workday Home page.
    1. Access the
      Home Cards Workspace
      .
    2. In the
      Home
       section, click
      Cards
      .
    3. Click
      Edit Work Tools
      .
    4. Add a row to the grid.
    5. In the
      Name
       field, enter
      Sana
      .
    6. Click
      OK
      .
  7. (Optional) Configure the Sana Workspace.
    1. From the Sana Workspace, click the arrow next to the workspace name in the navigation menu.
    2. Click
      Workspace Settings
      .
    3. Configure optional settings. You can:
      • Disable web search.
      • Disable intercom support chat.
      • Disable specific third-party connectors. (Sana Enterprise only.)
      • Restrict agentic actions to approved email domains. (Sana Enterprise only.)
Users can immediately access Sana from Workday and use Sana capabilities.